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DETAILED ACTION 



1. Claims 1-21 Pending. 



Claim Rejections -35USC§ 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-21 rejected under 35 U.S.C. 103(a) as being unpatentable over Lin et 

al. (U.S. Pre Grant Publication Number 2002/0133619 and referred to hereinafter as Lin) in view of 
Bremer et al. (U.S. Patent Number 6,553,002 and referred to hereinafter as Bremer). 

In Claims 1,11, and 21 , Lin discloses a method for associating at least one rule 
with a key (i.e. "A network device includes at least one network port, a masks table, a rules table, a 
pointers table, and a fast filter processor The masks table . contains filter information and a mask key. The 
rules table contains corresponding rules to the filter information and is related to the mask table by the 
mask key. The pointers table contains boundary data related to the rules for corresponding filter 
information. The fast filter processor is coupled to the mask table, the rules table and the pointers table, 
and configured to perform at least one binary search for at least one rule related to a data packet 
received by the network device at the at least one network port, the binary search being limited based on 
the boundary data in the pointers table." The preceding text excerpt clearly indicates that, in the invention, 
rules are associates with keys in tables in a network device.) (Abstract), comprising: arranging a 



Application/Control Number: 10/757,801 Page 3 

Art Unit: 2165 

plurality of objects in a table that is based on an ordering of information associated with 
each object (i.e. "Referring to FIG. 11, shown is an exemplary table to be searched, which could be any 

of the on-chip tables already described above... The rules and pointers tables can be set-up during 
programming or initiation as described above. A method for creating and maintaining pointers table is 
described below with reference to FIG. 13." The preceding text excerpt clearly indicates that rules 
pointers, addresses, and masks are all arranged in searchable tables based on an ordering of information 
(e.g. min/max information).) (Paragraphs 140-142); if the key is provided, employing at a search 

method to determine a starting entry in the table (i.e. "Next, at step S14-7, the binary search 

obtains a rule and compares it to the filtered packet for a match. If there is a match, then the rule is stored 
at step SI 4-8 to be processed by internal switch logic, and the processing proceeds directly to step S14- 
10 from step SI 4-8. Otherwise, if there is no match, then at step SI 4-9 it is checl<ed to see if there are 
any steps left in the binary search. If the binary search is not complete, then proces:sing returns to step 
SI 4-7, and the binary search performs the next step and checks for a match with another rule. " The 
preceding text excerpt clearly indicates a search is performed on the key to determine a starting entry in 
the table.) (Paragraph 150) and enabling the processing of the key based on at least one 

rule associated with the object (i.e. "Next, at step S14-7, the binary search obtains a rule and 

compares it to the filtered packet for a match. If there is a match, then the rule is stored at step S14-8 to 
be processed by internal switch logic, and the processing proceeds directly to step SI 4-10 from step S14- 
8. Othen/vise, if there is no match, then at step SI 4-9 it is checked to see if there are any steps left in the 
binary search. If the binary search is not complete, then processing returns to step S14-7, and the binary 
search performs the next step and checks for a match with another rule. When the binary search is 
complete or a rule has been matched, then the search is terminated at step S14-10. At step S14-11, a 
next mask is obtained, and steps S74-3 through step S14-11 are repeated until no more masks exist for 
which to search. At step SI 4-1 2, the internal switch logic applies the rules stored as appropriate. 
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Processing ends at step S1 4-1 3." The preceding text excerpt clearly indicates that rules associated with 
the key are processed upon search completion.) (Paragraph 150). 

Lin fails to disclose if the starting entry in the table is unequal to the provided key, 
employing another search method to determine an object in the table that is relatively 
equivalent to the key. 

Bremer discloses if the starting entry in the table is unequal to the provided key, 
employing another search method to determine an object in the table that is relatively 
equivalent to the key (i.e. "The route stack and the attached routes provide an advantage over 

conventional search tree systems. In a conventional Patricia search tree, when a non-matching address 
is located in a leaf node, the router must go back up the nodes of the Patricia tree and try to determine 
another route for the data packet. However, in accordance with the invention, each node may have an 
attached route which stores alternative routes so that the route stack stores each of these other routes 
during the downwards traversal of the search tree so that an alternate route may be located without 
having to traverse any nodes of the search tree again which reduces the time to find a alternate route. " 
The preceding text excerpt clearly indicates that a second search method may be applied which follows 
alternate routes until the closest match is found.) (Column 13, Lines 12-22). 

It would have been obvious to combine the teachings of Lin and Bremer with the 

motivation of determining forwarding destinations (e.g. IP addresses) for packets using 

a routing table and a unique search tree (Bremer, Abstract). 

In Claims 2, and 12, Lin teaches the search method includes at least a binary 
search (i.e. "Next, at step 314-7, the binary search obtains a rule and compares it to the filtered packet 

for a match." The preceding text excerpt clearly indicates that the search is a binary search.) (Paragraph 
150). 
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In Claims 3 and 13, Lin teaches the search method determines if the provided 
key is equal to a single key associated with one object in the table (i.e^ "Next, at step S14-7, 

the binary search obtains a rule and compares it to the filtered packet for a match. If there is a match, 
then the rule is stored at step 814-8 to be processed by internal switch logic, and the processing 
proceeds directly to step 814-10 from step 81 4-8." The preceding text excerpt clearly indicates that the 
key is matched to a single key/object in the table.) (Paragraph 150). 

In Claims 4 and 14, Lin teaches, the search method determines if the provided 
key is equal to a lower bound of a range of keys associated with one object in the table 

(i.e. "Referring back to FIG. 8, EPIC may also include a pointers table 221 for maintaining the maximum 
(MAX) and minimum (MIN) addresses of rules for corresponding masks. As described above, masks 
(filters) may be related to rules by a key. Accordingly, as an example, pointers table 221 may be created 
to maintain the rules MAX and MIN addresses (boundary) for each mask. " The preceding text excerpt 
clearly indicates that the binary search will attempt to determine a match for the key and will determine 
that it is a lower bound match due to the storing of the MIN and MAX boundaries for each mask/range of 
keys.) (Paragraph 142). 

Lin fails to teach, the other search method operates in a left direction across the 

table. 

Bremer teaches, the other search method operates in a left direction across the 
table (i.e. "The route stack and the attached routes provide an advantage over conventional search tree 

systems. In a conventional Patricia search tree, when a non-matching address is located in a leaf node, 
the router must go back up the nodes of the Patricia tree and try to determine another route for the data 
packet. However, in accordance with the invention, each node may have an attached route which stores 
alternative routes so that the route stack stores each of these other routes during the downwards 
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traversal of the search tree so that an alternate route may be located without having to traverse any 
nodes of the search tree again which reduces the time to find a alternate route. " The preceding text 
excerpt clearly indicates that the other method will follow a similar search path as the first search method, 
but take an alternate route which skips certain nodes. Because the table is sorted, if the first search 
method searches for the lower bounds, it will be searching in a left direction across the table; 
subsequently, when the other search method begins, if will follow a similar, but alternate, route which 
would also search in a left direction across the table, bypassing certain nodes.) (Column 13. Lines 12-22). 
It would have been obvious to combine the teachings of Lin and Bremer with the 

motivation of determining forwarding destinations (e.g. IP addresses) for packets using 

a routing table and a unique search tree (Bremer, Abstract). 

In Claims 5 and 15, Lin teaches, the search method determines if the provided 
key is equal to an upper bound of a range of keys associated with one object in the 
table (i.e. ''Referring back to FIG, 8, EPIC may also include a pointers table 221 for maintaining the 
maximum (MAX) and minimum (MIN) addresses of rules for corresponding masl<s. As described above, 
masks (filters) may be related to rules by a key. Accordingly, as an example, pointers table 221 may be 
created to maintain the rules MAX and MIN addresses (boundary) for each mask. " The preceding text 
excerpt clearly indicates that the binary search will attempt to determine a match for the key and will 
determine that it is an upper bound match due to the storing of the MIN and MAX boundaries for each 
mask/range of keys.) (Paragraph 142). 

Lin fails to teach, the other search method operates in a right direction across the 

table. 

Bremer teaches, the other search method operates in a right direction across the 
table (i.e. "The route stack and the attached routes provide an advantage over conventional search tree 
systems. In a conventional Patricia search tree, when a non-matching address is located in a leaf node, 
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the router must go back up the nodes of the Patricia tree and try to determine another route for the data 
packet. However, in accordance with the invention, each node may have an attached route which stores 
alternative routes so that the route stack stores each of these other routes during the downwards 
traversal of the search tree so that an alternate route may be located without having to traverse any 
nodes of the search tree again which reduces the time to find a alternate route. " The preceding text 
excerpt clearly indicates that the other method will follow a similar search path as the first search method, 
but take an alternate route which skips certain nodes. Because the table is sorted, if the first search 
method searches for the upper bounds, it will be searching in a right direction across the table; 
subsequently, when the other search method begins, it will follow a similar, but alternate, route which 
would also search in a right direction across the table, bypassing certain nodes.) (Column 13, Lines 12- 
22). 

It would have been obvious to combine the teachings of Lin and Bremer with the 
motivation of determining forwarding destinations (e.g. IP addresses) for packets using 
a routing table and a unique search tree (Bremer, Abstract). 

In Claims 6 and 16, Lin teaches the key is at least one of an IP address and a 
telephone number (i.e. "According to an embodiment of the present invention, provided is a method of 

filtering a packet in a network device, wherein the network device has a data packet input port and is 
configured to perform at least one network function. The method includes a steps of providing a masks 
table, a rules table and a pointers table. The method also includes a step of relating mask data in the 
masks table to rules data in the rules table with a key, one of the mask data corresponding to one or more 
of the rules data. The method also includes a step of defining pointer data in the pointers tables defining a 
maximum and minimum address of corresponding rule data for each of the mask data receiving a data 
packet at the data packet input port. The method also includes a step of multiplying the data packet with 
one of the mask data to produce a product. The method also includes a step of searching the rules table 
based on the product and the maximum and minimum address data for the one of the mask data for a 
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match between the product and rules data corresponding to the one of the mask data. The method also 
includes a step ofoutputting the match to a function within the network device in order to perform the at 
least one network function. " The preceding text excerpt clearly indicates that the method deals with 
packet forwarding, and that the search is performed to match addresses (e.g. IP addresses).) 
(Paragraphs 9-10). 

In Claims 7 and 17, Lin teaches the key is the IP address and information 
associated with the object includes at least one of a bound IP address, sister bound IP 
address, type, index, sister index, and rule (i.e. "According to an embodiment of the present 

invention, provided is a method of filtering a packet in a network device, wherein the network device has a 
data packet input port and is configured to perform at least one network function. The method includes a 
steps of providing a masks table, a rules table and a pointers table. The method also includes a step of 
relating mask data in the masks table to rules data in the rules table with a key, one of the mask data 
corresponding to one or more of the rules data. The method also includes a step of defining pointer data 
in the pointers tables defining a maximum and minimum address of corresponding rule data for each of 
the mask data receiving a data packet at the data packet input port. The method also includes a step of 
multiplying the data packet with one of the mask data to produce a product. The method also includes a 
step of searching the rules table based on the product and the maximum and minimum address data for 
the one of the mask data for a match between the product and rules data corresponding to the one of the 
mask data. The method also includes a step ofoutputting the match to a function within the network 
device in order to perform the at least one network function. " The preceding text excerpt clearly indicates 
that the associated information contains rules.) (Paragraphs 9-10). 

In Claims 8 and 18, Lin teaches the table includes at least an array, wherein the 
information associated with each object is sorted in the array (i.e. "Assuming that table 1100 is 
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sorted in an order, a binary searcti is extremely efficient. " The preceding text excerpt clearly indicates that 
the table is in sorted order. Note that it is common for tables to be stored as arrays n memory,) (Paragraph 
140). 

In Clainns 9 and 19, Lin teaches enabling the processing of the key based on at least 
one rule associated with the one object that is associated with the relatively equivalent 
lower bound (i.e. "Next, at step 814-7. ttie binary search obtains a rule and compares it to the filtered 

packet for a match. If there is a match, then the rule is stored at step S14-8 to be processed by internal 
switch logic, and the processing proceeds directly to step S14-10 from step 814-8. Othen^/ise, if there is no 
match, then at step 814-9 it is checked to see if there are any steps left in the binary search. If the binary 
search is not complete, then processing returns to step 814-7, and the binary search performs the next 
step and checks for a match with another rule. When the binary search is complete or a rule has been 
matched, then the search is terminated at step 814-10. At step 814-11, a next mask is obtained, and steps 
814-3 through step 814-11 are repeated until no more masks exist for which to search. At step 814-12, the 
internal switch logic applies the rules stored as appropriate. Processing ends at step 814-13." The 
preceding text excerpt clearly indicates that rules associated with the key are processed upon search 
completion.) (Paragraph 150). 

Lin fails to teach, the other search method further includes: searching from the starting 
entry in a left direction across the table to iteratively determine a lower bound of a range 
of keys associated with one object that is relatively equivalent to the provided key, 
wherein the other search method enables jumping over other objects in the table to 
determine the relatively equivalent lower bound. 
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Bremer teaches, the other search method further includes: searching from the starting 
entry in a left direction across the table to iteratively determine a lower bound of a range 
of keys associated with one object that is relatively equivalent to the provided key (i.e. 

"The route stack and the attached routes provide an advantage over conventional search tree systems. In 
a conventional Patricia search tree, when a non-matching address is located in a leaf node, the router must 
go back up the nodes of the Patricia tree and try to determine another route for the data packet However, 
in accordance with the invention, each node may have an attached route which stores alternative routes so 
that the route stack stores each of these other routes during the downwards traversal of the search tree so 
that an alternate route may be located without having to traverse any nodes of the search tree again which 
reduces the time to find a alternate route. " The preceding text excerpt clearly indicates that the other 
method will follow a similar search path as the first search method, but take an alternate route which skips 
certain nodes. Because the table is sorted, if the first search method searches for the lower bounds, it will 
be searching in a left direction across the table; subsequently, when the other search method begins, it will 
follow a similar, but alternate, route which would also search in a left direction across the table, bypassing 
certain nodes.) (Column 13, Lines 12-22), wherein the other search method enables jumping 

over other objects in the table to determine the relatively equivalent lower bound (i.e. "The 
route stack and the attached routes provide an advantage over conventional search tree systems. In a 
conventional Patricia search tree, when a non-matching address is located in a leaf node, the router must 
go back up the nodes of the Patricia tree and try to determine another route for the data packet However, 
in accordance with the invention, each node may have an attached route which stores alternative routes so 
that the route stack stores each of these other routes during the downwards traversal of the search tree so 
that an alternate route may be located without having to traverse any nodes of the search tree again which 
reduces the time to find a alternate route. " The preceding text excerpt clearly indicates that the other 
search method takes an alternate route which nodes of the search tree may not have to be traversed (e.g. 
objects in the table my be jumped over).) (Column 13, Lines 12-22). 
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It would have been obvious to one skilled in the art at the time of applicants invention 
to modify the teachings of Lin to with the teachings of Bremer to include searching from 
the starting entry in a left direction across the table to iteratively determine a lower bound 
of a range of keys associated with one object that is relatively equivalent to the provided 
key, wherein the other search method enables jumping over other objects in the table to 
determine the relatively equivalent lower bound with the motivation of determining 
foHA/arding destinations (e.g. IP addresses) for packets using a routing table and a 
unique search tree (Bremer, Abstract). 

In Claims 10 and 20, Lin teaches enabling the processing of the key based on at least 
one rule associated with the one object that is associated with the relatively equivalent 
upper bound (i.e. "Next, at step 814-7, the binary search obtains a rule and compares it to the filtered 
packet for a match. If there is a match, then the rule is stored at step 814-8 to be processed by internal 
switch logic, and the processing proceeds directly to step 814-10 from step 814-8. Otherwise, if there is no 
match, then at step 814-9 it is checked to see if there are any steps left in the binary search. If the binary 
search is not complete, then processing returns to step 31 4-7, and the binary search performs, the next 
step and checks for a match with another rule. When the binary search is complete or a rule has been 
matched, then the search is terminated at step 814-10. At step 814-11, a next mask is obtained, and steps 
814-3 through step 814-11 are repeated until no more masks exist for which to search. At step 814-12, the 
internal switch logic applies the rules stored as appropriate. Processing ends at step 814-13. " The 
preceding text excerpt clearly indicates that rules associated with the key are processed upon search 
completion,) (Paragraph 150). 
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Lin fails to teach, the other search method further includes: searching from the starting 
entry in a right direction across the table to iteratively determine an upper bound of a 
range of keys associated with one object that is relatively equivalent to the provided key, 
wherein the other search method enables jumping over other objects in the table to 
determine the relatively equivalent upper bound; and enabling the processing of the key 
based on at least one rule associated with the one object that is associated with the 
relatively equivalent upper bound. 

Bremer teaches, the other search method further includes: searching from the starting 
entry in a right direction across the table to iteratively determine an upper bound of a 
range of keys associated with one object that is relatively equivalent to the provided key 

(i.e. "The route stack and the attached routes provide an advaritage over conventional search tree 
systems. In a conventional Patricia search tree, when a non-matching address is located in a leaf node, the 
router must go back up the nodes of the Patricia tree and try to determine another route for the data 
packet However, in accordance with the invention, each node may have an attached route which stores 
alternative routes so that the route stack stores each of these other routes during the downwards traversal 
of the search tree so that an alternate route may be located without having to traverse any nodes of the 
search tree again which reduces the time to find a alternate route, " The preceding text excerpt clearly 
indicates that the other method will follow a similar search path as the first search method, but take an 
alternate route which skips certain nodes. Because the table is sorted, if the first search method searches 
for the upper bounds, it will be searching in a right direction across the table; subsequently, when the other 
search method begins, it will follow a similar, but alternate, route which would also search in a right 
direction across the table, bypassing certain nodes.) (Column 13, Lines 12-22), wherein the Other 
search method enables jumping over other objects in the table to determine the relatively 
equivalent upper bound (i.e. "The route stack and the attached routes provide an advantage over 
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conventional search tree systems. In a conventional Patricia search tree, when a non-matching address is 
located in a leaf node, the router must go back up the nodes of the Patricia tree and try to determine 
another route for the data packet. However, in accordance with the invention, each node may have an 
attached route which stores alternative routes so that the route stack stores each of these other routes 
during the downwards traversal of the search tree so that an alternate route may be located without having 
to traverse any nodes of the search tree again which reduces the time to find a alternate route." The 
preceding text excerpt clearly indicates that the other search method takes an alternate route which nodes 
of the search tree may not have to be traversed (e.g. objects in the table my be jumped over).) (Column 1 3, 
Lines 12-22). 

It would have been obvious to one skilled in the art at the time of applicants invention 
to modify the teachings of Lin to with the teachings of Bremer to include the other search 
method further includes: searching from the starting entry in a right direction across the 
table to iteratively determine an upper bound of a range of keys associated with one 
object that is relatively equivalent to the provided key, wherein the other search method 
enables jumping over other objects in the table to determine the relatively equivalent 
upper bound with the motivation of determining fonwarding destinations (e.g. IP 
addresses) for packets using a routing table and a unique search tree (Bremer. Abstract). 
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